diff --git a/infrastructure/terraform/secrets.tf b/infrastructure/terraform/secrets.tf
new file mode 100644
index 0000000..2df3694
--- /dev/null
+++ b/infrastructure/terraform/secrets.tf
@@ -0,0 +1,79 @@
+resource "random_password" "db_password" {
+  length  = 32
+  special = false
+}
+
+resource "random_password" "jwt_access" {
+  length  = 64
+  special = false
+}
+
+resource "random_password" "jwt_refresh" {
+  length  = 64
+  special = false
+}
+
+resource "random_password" "entitlement_signing" {
+  length  = 64
+  special = false
+}
+
+resource "aws_ssm_parameter" "db_password" {
+  name  = "/cibello/prod/db-password"
+  type  = "SecureString"
+  value = random_password.db_password.result
+}
+
+resource "aws_ssm_parameter" "jwt_access" {
+  name  = "/cibello/prod/jwt-access"
+  type  = "SecureString"
+  value = random_password.jwt_access.result
+}
+
+resource "aws_ssm_parameter" "jwt_refresh" {
+  name  = "/cibello/prod/jwt-refresh"
+  type  = "SecureString"
+  value = random_password.jwt_refresh.result
+}
+
+resource "aws_ssm_parameter" "entitlement_signing" {
+  name  = "/cibello/prod/entitlement-signing"
+  type  = "SecureString"
+  value = random_password.entitlement_signing.result
+}
+
+resource "aws_ssm_parameter" "gemini_api_key" {
+  name  = "/cibello/prod/gemini-api-key"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "aamos_api_key" {
+  name  = "/cibello/prod/aamos-api-key"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "apple_private_key" {
+  name  = "/cibello/prod/apple-private-key"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "google_service_account_json" {
+  name  = "/cibello/prod/google-service-account-json"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "smtp_pass" {
+  name  = "/cibello/prod/smtp-pass"
+  type  = "SecureString"
+  value = ""
+}
+
+resource "aws_ssm_parameter" "eoc_push_token" {
+  name  = "/cibello/prod/eoc-push-token"
+  type  = "SecureString"
+  value = ""
+}